Another attempt

Author: stevebux

infrastructure/terraform/components/api/cloudwatch_log_group_api_gateway_execution.tf

@@ -31,3 +31,24 @@ resource "aws_iam_policy" "lambda_logging_policy" {
     ]
   })
 }
+
+resource "aws_iam_role" "lambda_role" {
+  name               = "lambda_role"
+  assume_role_policy = <<EOF
+{
+    "Version": "2012-10-17",
+    "Statement": [{
+        "Effect": "Allow",
+        "Principal": {
+            "Service": "lambda.amazonaws.com"
+        },
+        "Action": "sts:AssumeRole"
+    }]
+}
+EOF
+}
+
+resource "aws_iam_role_policy_attachment" "authorizer_lambda_logging_policy_attachment" {
+  role       = aws_iam_role.lambda_role.id
+  policy_arn = aws_iam_policy.lambda_logging_policy
+}

infrastructure/terraform/components/api/module_authorizer_lambda.tf

@@ -13,6 +13,7 @@ module "authorizer_lambda" {
 
   function_name = "authorizer"
   description   = "Authorizer for Suppliers API"
+  role          = aws_iam_role.lambda_role.arn
 
   memory  = 512
   timeout = 20
@@ -53,8 +54,3 @@ data "aws_iam_policy_document" "authorizer_lambda_iam" {
     ]
   }
 }
-
-resource "aws_iam_role_policy_attachment" "authorizer_lambda_logging_policy_attachment" {
-  role       = aws_iam_role.authorizer_lambda_iam.id
-  policy_arn = aws_iam_policy.lambda_logging_policy
-}